TouchGrass / Information

Privacy policy

Updated October 15, 2026

TouchGrass is provided by Digital Ohana Inc. This policy explains how we handle information when you use the app. For privacy questions or requests, email info@thedigitalohana.com.

Account and profile information

We process your email address and authentication information to create and secure your account, along with profile details you provide, such as your name, username, bio and avatar. We use Supabase for authentication, database hosting and file storage. Never send your password to support.

Workouts and health information

We store the workouts, exercises, sets, routines, programs, bodyweight and other fitness information you choose to record. We use this information for your history, charts, personal records and training summaries.

Connecting Android Health Connect is optional. With your permission, TouchGrass reads supported data types including steps, weight, sleep, heart rate, resting heart rate, heart-rate variability, oxygen saturation, respiratory rate, skin temperature, body fat, lean body mass, distance, elevation gained, floors climbed and VO2 max. Availability depends on your devices and connected apps. Imported metrics, dates and source information are stored with your TouchGrass account for sync, history, charts and recovery/training context.

You can manage permissions in Android Health Connect settings. Revoking access stops future authorized reads; it does not delete information already imported into TouchGrass. You can request deletion of imported information by contacting us or deleting your account. TouchGrass does not request permission to write records back to Health Connect.

We do not sell Health Connect information or use it for advertising. Fitness and recovery displays provide general wellness information, not medical diagnosis or treatment.

Location and outdoor activities

When you start an outdoor recording and grant permission, TouchGrass uses location to record your activity. Background location supports recording while the screen is locked. You control recording through the start, pause and finish controls. The app explains background use before requesting permission. Denying location affects recording features.

Recorded routes, private GPX data and recording drafts use on-device storage rather than automatic cloud route uploads. Files you export or share are controlled by you. Shared events can contain the meeting point, trail, dates and details you enter; these are separate from a private recording.

Map and forecast requests send the requested coordinates or map area to providers such as USGS and the US National Weather Service. Trail lookup can use Google Places, Mapy and OpenStreetMap. Requests also expose ordinary network information such as your IP address. External maps and trail links operate under their providers' privacy practices.

Community and sharing

Your profile, avatar, event details, attendance, shared routines/programs and activity can be visible through the community features you use. Visibility depends on the feature and its available privacy settings. Avoid putting private health or location information in shared content that you do not want other people to see. Copies or exports other people have saved or received may remain outside your account.

Notifications and device storage

If you enable phone alerts, we use installation identifiers, notification preferences and push tokens to route alerts through Expo and Android push services. Manage alerts in TouchGrass and Android settings. Local app storage also holds session information, preferences and in-progress activities.

Providers and external content

We use Supabase to operate account services and Expo for app updates and enabled push delivery. Exercise videos and external links can load content from YouTube, Vimeo and the linked publisher. These providers receive the technical information needed to deliver their content and may use cookies or other technologies under their own privacy practices.

App service requests use HTTPS. Providers process operational and security logs to deliver and protect their services. We do not use a dedicated advertising or product-analytics SDK in TouchGrass; this does not prevent hosting, maps or video providers from processing technical information.

Retention and deletion

We retain account and fitness information while you use your account. To delete it, use the app's account-deletion control or follow the TouchGrass account-deletion instructions. We complete verified emailed account-deletion requests within 30 days.

Successful account deletion removes your account and associated profile/avatar, workout and imported health history, saved routines/programs, friendships, owned events/attendance and notification registrations. If deletion fails, retry or contact us so we can finish it. Some files may already have been removed before a failed attempt. We do not keep separate external user-data backups.

Provider security logs have their own retention periods. Supabase currently lists one day for API/database logs and one hour for authentication audit logs on the service plan we use. These logs can remain until their retention period ends; account deletion does not promise immediate erasure of every technical log or cached copy. See Supabase's retention information.

We retain privacy/deletion-request correspondence for up to 90 days after the request is resolved to document how it was handled, then delete it.

Account deletion does not remove original records from Health Connect or other health apps. Manage on-device recordings and device backups through the relevant app/Android controls, and manage exported or shared copies separately. We cannot remotely erase a file saved outside the app or a copy held by another person.

Website launch notifications

If you choose to sign up for a launch notification on this website, we collect your email address and your consent to send that notification. Netlify processes and stores the form submission on our behalf. We use the signup for the TouchGrass release notification, not ongoing marketing, and do not connect it to your app account or health information.

We keep the launch list until we send the release notification, then remove it. You can request earlier removal by emailing info@thedigitalohana.com. Signup does not create an app account. Website hosting and form providers may process technical/security information under their own service practices.

Your choices and how to contact us

You can manage Health Connect, location and notification permissions in Android settings, use the available profile/sharing controls, or request access to, correction of or deletion of your information by emailing info@thedigitalohana.com. We may verify account ownership before acting. If you cannot access your registered email, explain that so we can help with verification. Do not send passwords or private health/financial attachments.

We may update this policy as TouchGrass changes. The date above shows the latest revision.